Search: CVE-2026-56136

CVE-2026-56136 is an out-of-bounds read vulnerability in NTFS-3G through version 2026.2.25. It occurs in the ntfs_ir_nill() function within libntfs-3g/index.c and can be triggered by creating a file with a specially crafted name. This flaw allows an attacker with local access to read potentially confidential information from the memory of the ntfs-3g process. The vulnerability has a medium severity rating with a CVSS score of 4.7.